Finnish police denounced for illegal processing of data using Clearview AI software

In Finland, The Deputy Data Protection Ombudsman has issued a statutory reprimand to the National Police Board for illegal processing of special categories of personal data during a facial recognition technology trial, using Clearview AI’ software. In early 2020, the National Bureau of Investigation unit specialising in the prevention of child sexual abuse had experimented with this facial recognition technology in identifying potential victims. The investigation found that the measures taken by the controller of personal data had not prevented their unlawful processing. Neither had the police taken into consideration the requirements for processing special categories of personal data. Furthermore, the processing had been begun without obtaining information on how the service being used processed personal data. For example, the police had not determined in advance how long the data would be stored or whether it could be disclosed to third parties. The Deputy Data Protection Ombudsman ordered the National Police Board to notify the data subjects of the personal data breach insofar as their identity could be determined. The National Police Board must also request that Clearview AI erase the data transmitted by the police from its storage platforms.